This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File:                     U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier:          oRaC6lKJa2wMtIFB0nIie1MvRGfifwGj6TIGAgMu58s=
Subject key identifier:   F9:72:41:20:E9:79:D6:05:48:A7:6B:2C:02:55:53:9D:7B:34:19:CD
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer:       /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial:       060E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number:          05FB
Signing time:             Thu 18 Dec 2025 22:20:41 +0000
Manifest this update:     Thu 18 Dec 2025 22:20:40 +0000
Manifest next update:     Thu 25 Dec 2025 22:20:40 +0000
Files and hashes:         1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: G9VJrzS9MwJWDr/EKJQq5RKuM6QADoXaX3/zNAP6r3g=)
                          2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: 4jfL7SNWxDFOPvyEexB/Au04m937KqyBQLuHPsEG/BI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
        Validity
            Not Before: Dec 18 22:20:40 2025 GMT
            Not After : Dec 25 22:20:40 2025 GMT
        Subject: CN=69447e39-66fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:9f:5a:2e:36:93:39:af:3e:a9:b2:bc:42:
                    dd:3d:1b:e1:20:9e:00:72:74:45:1d:f1:95:59:37:
                    35:43:5a:92:67:39:b0:b2:ba:8b:a7:c6:93:ae:c4:
                    0d:5f:3e:e1:0e:b7:c8:57:b9:31:3d:38:c8:6f:b5:
                    8f:20:09:37:ba:d6:0d:ce:96:01:35:ed:2c:0d:38:
                    25:41:16:8e:73:5e:23:96:af:38:66:13:13:0f:ad:
                    1e:64:39:af:b1:d9:74:ec:d1:cf:b5:aa:c2:95:d4:
                    ed:b4:e5:0f:51:e9:ec:1f:8b:dd:60:2c:c2:67:04:
                    61:ed:26:80:1b:82:54:87:ed:75:eb:88:80:17:fb:
                    70:21:6d:24:29:ec:31:9d:d3:c1:49:e1:7f:14:f9:
                    19:70:43:46:aa:08:a4:91:f4:2b:73:ae:63:f0:db:
                    27:0a:c5:26:24:1a:b5:a0:0a:84:a8:fd:5a:54:8b:
                    9c:57:6a:9d:90:69:3c:00:ba:36:51:e4:ba:8d:d2:
                    90:08:8a:3b:c0:d1:d3:2a:12:35:7a:3c:15:26:79:
                    35:1c:6a:b4:b2:5e:7e:35:54:e8:d0:bf:b6:dd:50:
                    e7:15:93:ed:36:3e:bf:8d:29:37:57:a5:ba:7f:a0:
                    87:17:72:25:a1:52:99:29:0e:a1:3e:54:3b:26:a0:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:41:20:E9:79:D6:05:48:A7:6B:2C:02:55:53:9D:7B:34:19:CD
            X509v3 Authority Key Identifier:
                keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:5e:41:ae:14:8f:86:4c:1e:b9:e3:e3:d2:14:58:ee:6c:
         3c:9a:23:85:eb:62:68:e3:26:12:f6:be:ed:b8:75:0e:8a:73:
         cc:34:67:2b:0a:f9:f3:9d:f5:aa:0c:b3:17:f3:fb:67:c3:b9:
         00:5d:63:02:0d:95:f2:29:3d:4a:4b:f1:f4:fd:7d:73:23:59:
         72:69:10:31:a9:80:fa:0f:28:6c:7b:8f:de:ec:51:6d:1e:57:
         a6:35:63:17:d3:83:f1:88:10:d9:ff:98:61:4d:a3:fb:43:8c:
         92:43:f3:0a:6a:04:45:c2:be:a4:f5:3a:06:22:fb:6f:71:a1:
         2e:f6:d8:3f:81:e6:50:d2:94:0f:fa:2c:e0:c4:c1:78:73:4f:
         fc:cb:29:08:bb:71:b3:49:84:a3:ea:50:d4:02:fe:1d:e3:57:
         ba:1c:56:c9:91:aa:ed:1f:23:d5:a5:bb:5b:d8:8d:c8:5e:c2:
         c9:47:e7:fa:9a:1c:f6:4b:55:09:50:0a:69:5d:8d:bf:6c:f6:
         b0:51:50:86:94:aa:36:59:82:e5:2d:51:98:5f:a5:19:cc:d0:
         bc:bd:c1:ed:c2:7c:b7:5f:64:5b:f8:60:c4:0f:96:80:55:d3:
         70:2a:0f:e0:23:9f:84:0d:3b:46:71:d7:78:e0:7f:c0:61:63:
         f7:c9:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:47 2025 by rpki-client